docs: reconcile audit trail and fix stale references before mainnet launch - #3
Merged
Merged
Conversation
…aunch Two new automated security scans landed in docs/security/ alongside a deleted internal-review doc and a deleted historical product spec; the surrounding docs and legal copy hadn't caught up. Broken/dead references fixed, and audit-status claims brought in line with what's actually true: internal review + AI-driven scans, no formal manual audit yet. - README: drop dead link to the deleted internal-review doc, point at the external-audit-response and the two new scan reports instead. - RUNBOOK: remove references to docs/STATUS.md, which never existed. - contracts/.env.example: replace dangling "Task 12" reference with the actual RUNBOOK section that has the instructions. - Terms/Risk Disclosure pages: "THE ESCROW CONTRACT HAS BEEN AUDITED" and "externally audited" (linking directly to the scan vendor) overstated the actual status and contradicted the AI-scan providers' own disclaimers against being cited as an audit to the public. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Q8Zfz426LiMJF9LMd9py8M
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Changes
2026-07-22-1dollar-audit-report.md,2026-07-22-nethermind-audit-agent-report.pdf), fixing a dead link.docs/STATUS.mdtwice — that file has never existed in the repo's history — dangling references removed and replaced with real pointers (docs/security/, README's Contracts table).packages/contracts/.env.examplepointed at "Task 12" (not in this repo) for how to verify Safe addresses — now points at RUNBOOK §4, which has that exact guidance.docs/history/coffer-product-spec-v1.md, the supersededdocs/security/2026-07-12-cofferescrow-audit.md) that were sitting unstaged in the working tree, and the two new audit-report additions, so the docs/security folder actually reflects the current audit trail.Notes
apps/webverification: couldn't runpnpm install/tscin this environment — local pnpm minimum-release-age policy rejects several lockfile entries unrelated to this change, andnode_modulesisn't installed here. The two.tsxedits are copy-only string changes inside existing JSX (no new imports/logic); diffs reviewed by hand for balanced JSX.Co-Authored-By: Claude Sonnet 5 noreply@anthropic.com
Claude-Session: https://claude.ai/code/session_01Q8Zfz426LiMJF9LMd9py8M